What’s Vulnerable › Vulnerabilities

CVE-2011-4093

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-02-10 · updated 2026-06-16
• Weakness: CWE-190

Description

Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large number of connections until the overflow occurs and an ID of another user is provided.

Affected products

• Armin Burgmeier Net6: through 1.3.13; 1.3.1, 1.3.2, 1.3.3, 1.3.4, 1.3.5, 1.3.6 (+6)
• Opensuse: 11.3
• Opensuse Project Opensuse: 11.4
• Oracle Corporation Solaris Operating System: 11.2

References

• http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a
• http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html
• http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html
• http://www.openwall.com/lists/oss-security/2011/10/31/1
• http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
• https://bugzilla.novell.com/show_bug.cgi?id=727710
• https://bugzilla.redhat.com/show_bug.cgi?id=750631
• http://git.0x539.de/?p=net6.git%3Ba=commitdiff%3Bh=ac61d7fb42a1f977fb527e024bede319c4a9e169%3Bhp=08c8e2261604c6fcbbaf62f9ae9d13f7015fcb9a
• http://lists.opensuse.org/opensuse-updates/2012-01/msg00044.html
• http://lists.opensuse.org/opensuse-updates/2012-01/msg00054.html
• http://www.openwall.com/lists/oss-security/2011/10/31/1
• http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

Get alerted when CVE-2011-4093 or the next vulnerability affects your stack